904919 - [META] Add VPN Support

Status: RESOLVED WONTFIX

(Firefox OS Graveyard :: Gaia::Settings, defect)

Description

[nagle3092]

User Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; Tablet PC 2.0)

Steps to reproduce:

Please include VPN support into Firefox OS


Actual results:

Did not include VPN support


Expected results:

Should have built in VPN support

Comment 1

[Andrew Truong [:feer56] [:andrewtruong] [:atruong]]

Firstly reported on SUMO; https://support.mozilla.org/en-US/questions/967948

Question asked: "Simple question, does Firefox OS support the use of VPN's? If not is it a feature that will be added? And if so, when?"

Comment 2

[Bruce Huang [:bhuang] (inactive)]

Feature request, ni to Sandip to backlog for RIL?

Comment 3

[Sandip Kamat]

Adding to our backlogs for now

Comment 5

[Vincent]

Please use an open standard this time, as OpenVPN. Not as Facebook in the Contact app instead of CardDav.

Comment 6

[Michael S.]

A Cisco-compatible implementation like "vpnc" would be useful.

Comment 7

[[e-mail]]

I think ipsec client would be very useful. Both iPhones and Android have support for ipsec.

Comment 8

[florian.gillot]

An OpenVPN client would be awesome !

Comment 9

[Valentin Gosu [:valentin] (he/him)]

(In reply to florian.gillot from comment #8)
> An OpenVPN client would be awesome !

An OpenVPN client for Firefox OS is being worked on in Bug 1033580.
Hopefully, it will be implemented this trimester, and land in nightly before the end of the year.

Comment 10

[florian.gillot]

(In reply to Valentin Gosu [:valentin] from comment #9)
> (In reply to florian.gillot from comment #8)
> > An OpenVPN client would be awesome !
> 
> An OpenVPN client for Firefox OS is being worked on in Bug 1033580.
> Hopefully, it will be implemented this trimester, and land in nightly before
> the end of the year.

Thanks for the information !

Comment 11

[ttest11]

PPTP with selectable (on/off) PPP encryption (MPPE)

Comment 12

[Thatoo]

OpenVPN would be great of course but is it possible tohope for SSTP also.
In Iran, PPtP or OpenVPN are regularly blocked.
I installed SSTP on my ubuntu computer and it works quiet well, fast and most of the time reliable.
I followed this tutorial :
http://support.purevpn.com/sstp-configuration-guide-for-ubuntu

I guess Ubuntu phone will have it then also. Is it possible to implement it for FFOS also?

Comment 13

[Alexander]

@Thatoo, OpenVpn already supports connecting through TCP port 443 and supports using a HTTP proxy. So if OpenVPN is supported, that should cover everybody. Of course UDP connections are much more efficient.

Comment 14

[Thatoo]

What I understood from speaking with VPN provider, the problem with OpenVPN is that it goes only through a specific port so it's easy for government to shut it down. Same problem for PPtP VPN.
Whereas SSTP is more difficult for government (Iran, China) to stop it.

Comment 15

[Clément Lefèvre]

(In reply to Thatoo from comment #14)
> What I understood from speaking with VPN provider, the problem with OpenVPN
> is that it goes only through a specific port so it's easy for government to
> shut it down. Same problem for PPtP VPN.
> Whereas SSTP is more difficult for government (Iran, China) to stop it.

Which is totally wrong. You can freely choose protocol and port for OpenVPN and so TCP/443 is one of the possible choices.

You can even easily have several OpenVPN instances running at once on different ports and services.

If those providers gave you that answer, they obviously lie and just don't want to offer another protocol and port combination.

This may be right for PPTP and IPSec though.

Comment 16

[Dave Huseby [:huseby]]

Mullvad in Sweden wants to provide engineering support to improve VPN support.  They are working with us and the Tor Project to come up with a solution that meets everybody's requirements.

Comment 17

[[e-mail]]

That's a good news. Please make sure UX is get noticed to make sure user could have full experience.